Effective Date: September 01, 2025
Last Updated: September 08, 2025

This Privacy Policy (“Policy”) is issued by GarageZale LLC (“GarageZale,” “we,” “us,” or “our”) and applies to all individuals who access or use our services, including our publicly accessible website, Progressive Web Application (“PWA”), subdomains, interfaces, content platforms, and any ancillary functionality or customer-facing tools (collectively, “Services”).

GarageZale is committed to maintaining the highest standards of personal information protection and data transparency for all users. This Policy outlines in granular detail our procedures for collecting, processing, using, retaining, and securing personal data across multiple jurisdictions within the United States, including enhanced protections applicable to residents of California and other states with comprehensive consumer data privacy laws.

Please note that by continuing to access or use our Services, you indicate your agreement to the terms set forth in this Policy. Users are strongly encouraged to read the Policy in its entirety; however, for convenience, we have structured this document using clear, topic-specific headings so that users may browse relevant provisions as needed.

1. Scope and Applicability
This Policy applies to all personal information provided to or collected by GarageZale in connection with your use of our Services, regardless of device type, access point, or location. This includes interactions through mobile browsers, desktop applications, embedded communication systems, and account registration workflows.

2. Categories of Personal Information We Collect
GarageZale may collect and retain the following categories of data, each of which may constitute personal information or digital identifiers under applicable state and federal laws:

• Identification Information: Full legal name, preferred contact email address, mobile phone number, username or account aliases
• Geolocation Data: IP-derived location, GPS-enabled coordinates (when voluntarily activated), proximity data for listings and sales navigation
• Digital Metadata: Browser version, operating system, device manufacturer and model, access times and dates, session duration, clickstream behavior
• Platform Communications: Messages exchanged via internal communication tools, listing descriptions, attachments or embedded media voluntarily submitted
• Engagement & Preference Signals: Includes applied search parameters, interaction frequency with specific listings, and behavioral activity logs associated with account usage.

GarageZale does not actively collect health-related information, financial account identifiers, biometric data, passwords, government-issued identification numbers, or sensitive personal data—unless expressly required under applicable law or provided by the user voluntarily in support interactions.

3. Purposes for Processing Personal Information
Personal information collected by GarageZale may be used for one or more of the following business or lawful purposes, consistent with applicable legal requirements:

• To establish and maintain user accounts, facilitate login credentials, and enable secure access to Services
• To deliver geographically relevant listing content and features based on location settings
• To analyze usage trends, system performance, and consumer engagement metrics to optimize design and service delivery
• To provide seller-to-buyer messaging capabilities, transactional communication, and dispute resolution support
• To prevent fraud, investigate misuse, and maintain system integrity and availability
• To fulfill contractual and legal obligations imposed by regulatory authorities
• To inform feature development, product enhancements, and UI/UX improvements
• To comply with tax, reporting, law enforcement, or litigation-related requirements

4. Consent Practices and Third-Party Disclosures
GarageZale operates with a “consent-first” privacy model in jurisdictions where express user authorization is legally required. In all cases:

• Geolocation Services and messaging functionalities are disabled until users activate them
• Personal data is never sold to third parties for monetary value or bartered for marketing visibility
• If GarageZale chooses to integrate external APIs or services (e.g., mapping platforms, analytics solutions, payment processors), we will transparently disclose such relationships and provide supporting documentation or terms of service to affected users prior to activation

Third-party access to personal information is strictly limited to essential service delivery, subject to appropriate data protection safeguards, and may include service providers, consultants, cloud hosting vendors, or legal representatives acting under nondisclosure and limited-use agreements.

5. U.S. State Privacy Rights Addendum
Including CCPA and CPRA Provisions for California Residents

Residents of California, Virginia, Colorado, Connecticut, Oregon, and other U.S. states with consumer privacy statutes may have the following rights regarding their personal information, pursuant to applicable legislation including the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”):

• Right to Know: Obtain information regarding what personal data has been collected, the purposes of such collection, and third-party disclosures over the preceding 12-month period
• Right to Access: Request a complete copy of personal information held by GarageZale
• Right to Delete: Request deletion of personal data, subject to exceptions where retention is legally required
• Right to Correct: Submit revisions to inaccurate or incomplete information
• Right to Opt-Out: Prevent the “sale” or “sharing” of personal information (e.g., for advertising or behavioral targeting)
• Right to Limit Use of Sensitive Data: Limit the use or disclosure of sensitive data categories to core business purposes only, when applicable

GarageZale does not sell or share personal information within the definitions established by California law. No user data is transferred to third parties for cross-context behavioral advertising or monetized in connection with targeted ad campaigns.

Exercising Your Rights
Eligible users may submit privacy rights requests by contacting the GarageZale Privacy Team at:

Email: privacy@garagezale.com
Postal Mail: GarageZale LLC, 522 W Riverside Ave, Suite #7079, Spokane, WA 99201

Requests must specify the nature of the exercise (e.g., access, deletion, correction). We may require identity verification, and authorized agents may act on your behalf if valid documentation is provided.

GarageZale will respond to verifiable requests within 45 calendar days. Where extensions are permitted, users will be notified of revised deadlines and resolution status. If a request is denied, appeal instructions will be included. California residents may also contact the California Privacy Protection Agency (CPPA).

6. Data Retention and Deletion Protocols
GarageZale retains personal information for as long as reasonably necessary to fulfill business objectives, meet legal or regulatory obligations, enforce agreements, and prevent misuse. Retention timelines are informed by:

• Contractual obligations
• Applicable statutes of limitation
• Internal operational requirements
• Historical audit and reconciliation needs

Upon account closure or verified user deletion request, GarageZale will initiate secure disposal procedures, including permanent deletion from primary and backup systems unless statutory retention mandates override.

7. Data Security Framework
GarageZale has implemented a robust and evolving security framework to ensure the confidentiality, integrity, and availability of personal information. Our multi-layered approach includes:

• TLS/SSL encryption across all public-facing data flows
• Tokenized session management and automatic timeout protocols
• Server isolation and intrusion detection monitoring
• Role-based permissions with least-privilege default settings
• Scheduled updates, patch management, and external threat assessments
• Incident response protocols reviewed quarterly

Despite best efforts, no system can guarantee absolute security. Users are encouraged to maintain strong, unique passwords and exercise discretion when using shared devices or public networks.

8. Aggregated, Anonymized, and De-Identified Data
GarageZale may compile usage statistics and user activity metrics in formats that no longer reasonably identify individuals. This includes:

• Aggregated reporting across multiple listings or geographies
• Behavioral analytics for UI improvement
• Platform optimization studies based on anonymized session data

Such data sets are excluded from privacy rights described above when re-identification is not feasible by GarageZale or its service providers.

9. Contact Information and Policy Governance

GarageZale LLC 522 W Riverside Ave, #7079 Spokane, WA 99201 Email: privacy@garagezale.com

GarageZale reserves the right to update or amend this Privacy Policy at any time and without prior notice. All changes will be reflected in the “Last Updated” date and published publicly on our website. Continued use of the Services following any update constitutes acceptance of the revised terms.